This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/7ufe8Ziwajih3V-SsOX5xLzev30.roa
File:                     7ufe8Ziwajih3V-SsOX5xLzev30.roa (raw, json)
Hash identifier:          QyIeTG/G1FNVaI9BwLqSRkawlHV2k3OXzvdMZeHqyqI=
Subject key identifier:   EE:E7:DE:F1:98:B0:6A:38:A1:DD:5F:92:B0:E5:F9:C4:BC:DE:BF:7D
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       019B7AC7A4570F0EEBBE21F6FE86A0D6A40B
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/7ufe8Ziwajih3V-SsOX5xLzev30.roa
Signing time:             Thu 01 Jan 2026 18:17:42 +0000
ROA not before:           Thu 01 Jan 2026 18:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31082
IP address blocks:        94.125.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:a4:57:0f:0e:eb:be:21:f6:fe:86:a0:d6:a4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Jan  1 18:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eee7def198b06a38a1dd5f92b0e5f9c4bcdebf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:e2:6b:22:1e:a6:b2:68:fb:e8:cf:30:fd:
                    06:9c:27:97:02:86:59:7c:0e:18:51:4e:c2:99:08:
                    b6:21:1e:7d:d4:c7:6b:b3:da:d2:e0:cb:e0:1f:46:
                    68:20:91:80:4e:03:d8:54:75:42:9f:cc:0f:9d:bb:
                    b1:cd:38:d5:a4:00:fa:9d:fd:a7:23:91:74:c5:c5:
                    96:24:f6:97:77:11:5a:c0:75:88:89:6b:14:26:7a:
                    10:0e:29:4f:7b:2a:88:ce:18:74:67:fd:a2:f1:93:
                    ea:2d:73:03:c0:ed:de:d8:b8:08:52:08:17:3c:58:
                    ae:fe:e1:63:d9:f1:28:a5:d5:2f:ce:7f:55:92:72:
                    4a:12:d6:3c:f5:69:61:17:14:e9:b7:b4:cb:80:70:
                    2c:7b:d7:ac:74:9a:76:62:a4:e0:3e:c9:36:22:f5:
                    d4:ef:c5:1c:6a:de:6a:af:71:aa:b6:8d:fb:78:dc:
                    73:53:9a:8a:8e:43:ab:a1:13:4a:29:ce:bb:5f:46:
                    ed:9c:4b:d1:39:9e:60:df:7d:16:cd:76:01:83:af:
                    88:06:9d:d2:8d:b4:40:03:04:9c:bb:54:cc:49:d5:
                    6e:c1:93:f2:50:3f:9f:e8:13:56:97:a9:e7:5e:c6:
                    eb:f3:de:df:71:fa:4b:00:03:81:ce:51:f0:27:95:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E7:DE:F1:98:B0:6A:38:A1:DD:5F:92:B0:E5:F9:C4:BC:DE:BF:7D
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/7ufe8Ziwajih3V-SsOX5xLzev30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.125.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:79:27:49:4d:e3:7d:ce:29:33:45:ee:79:37:38:1a:70:3a:
         a1:94:65:d1:76:49:5d:09:6a:27:d6:46:a4:c7:fa:f9:fc:9d:
         ed:60:9b:b0:40:75:20:e4:15:4c:b8:25:35:1f:c9:3b:12:e8:
         80:1d:d6:86:f5:46:b6:3e:18:24:56:c3:23:33:95:13:c4:09:
         e5:ae:41:f8:f0:d8:74:6a:d3:70:a8:71:ca:02:ff:83:5a:81:
         d6:13:3b:db:ee:4d:5c:a8:25:f2:5f:cf:74:64:53:a8:30:b1:
         b3:07:9d:26:9f:96:02:82:53:a3:ed:78:f7:87:e3:4d:46:9d:
         0f:8b:55:5a:c6:98:b1:77:fb:b0:22:a6:fd:38:e9:12:43:79:
         fd:7b:df:f9:3f:2f:29:2d:a8:c3:81:46:9d:db:47:93:bd:e3:
         06:5f:b3:b6:45:78:73:28:39:aa:9c:55:bf:fa:07:e4:a8:f7:
         b5:67:ee:cf:b8:ba:e9:28:2a:b1:4b:5c:70:a6:e0:a6:0f:a3:
         08:08:23:ec:8f:f0:eb:81:1a:c4:87:e1:a9:55:74:b1:db:4e:
         03:98:ef:dc:6e:69:d1:ab:c8:4d:c5:06:21:a8:3d:1c:bb:60:
         f2:77:7e:30:4a:6e:db:a9:68:df:a8:8b:e3:19:14:c9:c1:0c:
         c6:94:dd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:20:22 2026 by rpki-client